Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Gemini API Key — You provide your own Google Gemini API key to enable AI features. The key is stored locally on your device using Chrome's chrome.storage.local and is never transmitted to our servers.
• License Key — If you purchase a Pro subscription, your LemonSqueezy license key is stored locally and sent only to LemonSqueezy's API for validation.

1.2 Information Collected Automatically

• Usage Counts — The Extension tracks how many AI generation sessions you use per month (for enforcing free/pro tier limits). These counts are stored locally on your device.
• Anonymous Analytics — We collect anonymous usage events through Google Analytics 4 (see Section 4).
• Error Reports — Technical error data may be sent to Sentry for monitoring (see Section 5).

1.3 Information We Do NOT Collect

• We do not collect your name, email address, or any personal contact information.
• We do not collect or store your product images, generated titles, descriptions, or item specifics.
• We do not collect your eBay account credentials or listing data.
• We do not read or access any eBay pages other than listing creation pages (ebay.com/lstng*).

2. How We Use Your Data

We use the collected data solely for the following purposes:

• Providing AI Features — Your product image is sent to Google Gemini to generate titles, descriptions, and item specifics for your eBay listings.
• Enforcing Usage Limits — Session counts are tracked locally to enforce free and Pro tier limits.
• Improving the Extension — Anonymous analytics help us understand which features are used so we can prioritize development.
• Maintaining Reliability — Error reports help us detect when eBay changes their page structure so we can release fixes promptly.
• License Validation — License keys are validated with LemonSqueezy to determine your subscription tier.

We do not use your data for advertising, profiling, behavioral analysis, or any purpose not listed above.

3. Artificial Intelligence & Google Gemini

The Extension uses Google's Gemini API to analyze product images and generate listing content. When you use an AI feature:

• Your product's main image is extracted from the eBay listing page and sent directly to Google's Gemini API using your own API key.
• The image data is sent to Google's servers at generativelanguage.googleapis.com for processing.
• The Extension does not store, cache, or retain the images or AI-generated content after injection into the eBay form.
• Google's use of data sent to the Gemini API is governed by Google's Gemini API Terms of Service and Google's Privacy Policy.
• Since you use your own API key, your API usage is subject to your own agreement with Google.

The Extension uses multiple Gemini models with automatic rotation (Gemini 2.5 Flash-Lite, Gemini 2.5 Flash, Gemma 3 27B) to handle rate limits. All models are accessed through the same Google API endpoint under the same terms.

4. Data Storage

All Extension data is stored locally on your device using Chrome's chrome.storage.local API:

No data is stored on our servers. Uninstalling the Extension removes all locally stored data.

5. Google Analytics (GA4)

The Extension uses Google Analytics 4 via the Measurement Protocol to collect anonymous usage statistics. This helps us understand which features are used and improve the Extension.

What is collected:

• Feature usage events — Which AI feature was used successfully (title, description, or item specifics). No content is included.
• Anonymous client ID — A randomly generated UUID stored locally. This ID cannot be linked to your identity.
• Geographic region — Your country is determined once via a request to ip-api.com (a geolocation service) and cached locally. Your IP address is sent to ip-api.com for this lookup but is not stored by the Extension. Approximate location may also be derived by Google from your IP address when analytics events are sent.

What is NOT collected:

• No product images, titles, descriptions, or listing content.
• No eBay account information or browsing history.
• No personal identifiers (name, email, etc.).

Google's handling of Analytics data is governed by Google's Privacy Policy.

6. Error Tracking (Sentry)

The Extension uses Sentry.io to monitor technical errors, specifically to detect when eBay changes their page structure in ways that break the Extension.

What is collected:

• Error type and message (e.g., "DOM selector not found").
• The eBay URL path where the error occurred (no query parameters or personal data).
• The function name where the error occurred.
• Extension version.

What is NOT collected:

• No API keys, license keys, or credentials.
• No product images or listing content.
• No personally identifiable information (PII).

Safeguards:

• Errors are deduplicated — each error type is sent only once per page load.
• A daily limit of 50 error reports per user prevents excessive data transmission.
• User-caused errors (missing API key, network issues, rate limits) are filtered out and never sent to Sentry.

Sentry's handling of error data is governed by Sentry's Privacy Policy.

7. Licensing & Payments (LemonSqueezy)

Pro subscriptions are managed through LemonSqueezy. When you enter a license key:

• The license key is sent to LemonSqueezy's API (api.lemonsqueezy.com) to validate its status.
• Validation occurs at most once every 24 hours; cached results are used in between.
• No payment information is processed or stored by the Extension. All payments are handled directly by LemonSqueezy.

LemonSqueezy's handling of payment and license data is governed by LemonSqueezy's Privacy Policy.

8. Permissions

The Extension requests the following Chrome permissions:

9. Data Security

• All API communications use HTTPS encryption.
• API keys are stored in Chrome's local storage and never logged to the console or included in error reports.
• The Extension does not have a backend server — there is no central database of user data.
• Image data is processed in memory and discarded after the API call completes.

10. Chrome Web Store Compliance

The Extension's use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:

• Data collected is used only for the purposes disclosed in this policy.
• User data is not transferred to third parties except as described herein.
• User data is not used for advertising, credit assessment, or sold to data brokers.
• The Extension does not collect or use web browsing activity beyond what is required for its stated eBay listing features.

11. Data Retention

• Local data (API key, usage counts, settings) persists until you uninstall the Extension or clear Chrome's extension data.
• Analytics data is retained by Google Analytics for up to 14 months (the default GA4 retention period), after which it is automatically deleted.
• Error data is retained by Sentry for 90 days, after which it is automatically deleted.
• Geolocation cache (country name only) is stored locally indefinitely to avoid repeated lookups. It contains no IP address data.
• Product images and AI-generated content are not retained — they exist only transiently in memory during API calls and are discarded immediately after.

12. Transfer of Data

Your data may be transferred to and processed on servers located outside your country of residence. Specifically:

• Google Gemini API & Google Analytics — Data is processed by Google, which operates servers globally, including in the United States. Google participates in the EU-US Data Privacy Framework.
• Sentry — Error reports are processed by Sentry, Inc., based in the United States.
• LemonSqueezy — License validation requests are processed by LemonSqueezy, based in the United States.
• ip-api.com — A single geolocation request is sent to ip-api.com servers.

By using the Extension, you consent to the transfer of data to these services. All transfers are conducted over HTTPS encryption. Each service provider maintains their own data protection practices as described in their respective privacy policies.

13. Disclosure of Data

We do not have access to your data because it is stored locally on your device. However, data sent to third-party services (as described in this policy) may be disclosed in the following circumstances:

• Legal Requirements — Third-party service providers may disclose data if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• Business Transfers — If the Extension or its assets are acquired, merged, or transferred, this Privacy Policy would continue to apply to your data.
• Safety — Third-party providers may disclose data to prevent or investigate wrongdoing in connection with their services.

We do not independently disclose, sell, or share your data with any party. The Extension has no backend server and does not maintain a user database.

14. Third-Party Services Summary

15. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your data under the following legal bases:

• Consent — By accepting this Privacy Policy during setup, you consent to the data processing described herein. You may withdraw consent at any time by uninstalling the Extension.
• Legitimate Interest — Error tracking via Sentry is processed under our legitimate interest in maintaining and improving the Extension's functionality. This processing is minimal, non-intrusive, and does not involve personal data.
• Contract Performance — License key validation is necessary to provide Pro subscription features you have purchased.

16. Your Rights

All Users

• Access & Deletion: All Extension data is stored locally on your device. You can view, modify, or delete it by managing the extension in Chrome settings or by uninstalling the Extension.
• Opt-out of Analytics: Uninstalling the Extension stops all analytics collection immediately.
• API Key Control: You can remove your API key at any time through the Extension's options page.

European Users (GDPR)

If you are in the EEA, UK, or Switzerland, you have the right to:

• Right of Access — Access the personal data we hold about you (all data is stored locally on your device).
• Right to Rectification — Request correction of inaccurate data.
• Right to Erasure — Request deletion of your data (achieved by uninstalling the Extension).
• Right to Restriction — Request that we restrict the processing of your data under certain conditions.
• Right to Data Portability — Request a copy of your data in a structured, machine-readable format. Since all data is stored locally in Chrome, you can export it directly via Chrome's developer tools.
• Right to Object — Object to the processing of your data based on legitimate interest. You may opt out at any time by uninstalling the Extension.
• Right to Withdraw Consent — Withdraw consent at any time by uninstalling the Extension.
• Right to Lodge a Complaint — Lodge a complaint with your local data protection supervisory authority.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information is collected about you and how it is used.
• Request deletion of your personal information.
• Opt out of the sale or sharing of your personal information.
• Not be discriminated against for exercising your privacy rights.

We do not sell, share, or trade your personal information. The Extension does not engage in any activity that constitutes a "sale" or "sharing" of personal information as defined under the CCPA/CPRA.

CalOPPA (California Online Privacy Protection Act)

In accordance with CalOPPA:

• This Privacy Policy is conspicuously linked from the Extension's welcome page and is accessible at any time.
• You will be notified of any material changes to this policy via an update to the "Last updated" date.
• You can manage your personal data directly through Chrome's extension settings or by uninstalling the Extension.

Do Not Track Signals: The Extension does not track users across third-party websites and does not respond to Do Not Track (DNT) browser signals, as it does not engage in cross-site tracking. The Extension only operates on eBay listing creation pages.

17. Cookies and Tracking Technologies

The Extension does not use cookies, web beacons, pixel tags, or any browser-based tracking technologies. Specifically:

• No cookies are set, read, or stored by the Extension.
• No local storage or session storage is used for tracking purposes (only chrome.storage.local for functional data as described in Section 4).
• No fingerprinting or cross-site tracking techniques are employed.
• Analytics are collected via the GA4 Measurement Protocol (a server-side API), not through client-side tracking scripts or cookies.

18. Behavioral Remarketing

The Extension does not use any behavioral remarketing, retargeting, or personalized advertising services. Specifically:

• No advertising cookies or tracking pixels are used.
• No user data is shared with advertising platforms (such as Google Ads, Facebook Ads, or similar services).
• No browsing behavior, purchase history, or user profiles are created for marketing purposes.
• Analytics data collected via GA4 is used solely for aggregate feature usage statistics, not for targeting individual users.

19. Links to Other Sites

This Privacy Policy contains links to the privacy policies of third-party services (Google, Sentry, LemonSqueezy). The Extension's options page also links to Google AI Studio for API key setup.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

20. Children's Privacy

The Extension is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided data through the Extension, please contact us so we can address the situation.

21. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last updated" date at the top of this page. Continued use of the Extension after changes constitutes acceptance of the updated policy.

22. Contact

If you have questions or concerns about this Privacy Policy, you can reach us at:

• Email: nicelistermain@gmail.com
• Chrome Web Store: Through the support section on our Chrome Web Store listing page.